eset / nimfilt
A collection of modules and scripts to help with analyzing Nim binaries
☆70Updated 5 months ago
Alternatives and similar repositories for nimfilt:
Users that are interested in nimfilt are comparing it to the libraries listed below
- A tool that automates regex generation for the x86 and x86-64 instruction sets☆70Updated 11 months ago
- An automation plugin for Tiny-Tracer framework to trace and watch functions directly out of the executable's import table or trace logs (…☆114Updated 8 months ago
- GarbageMan is a set of tools for analyzing .NET binaries through heap analysis.☆115Updated last year
- VBScript & VBA source-to-source deobfuscator with partial-evaluation☆75Updated 7 months ago
- Native Python3 bindings for @horsicq's Detect-It-Easy☆60Updated last week
- ☆73Updated 8 months ago
- Get information about stripped rust executables☆25Updated last week
- UnpacMe IDA Byte Search☆28Updated last year
- IDA Pro plugin to aid with the analysis of native IIS modules☆17Updated 7 months ago
- Writeups for CTF challenges☆30Updated last year
- Use YARA rules on Time Travel Debugging traces☆89Updated last year
- TrashDBG the world's worse debugger☆23Updated 3 years ago
- ☆112Updated last month
- Small tool to convert beteween the PE alignments (raw and virtual).☆87Updated 2 years ago
- Powershell Linter☆50Updated last week
- Small visualizator for PE files☆67Updated last year
- ☆25Updated 4 months ago
- a PE Loader and Windows API tracer. Useful in malware analysis.☆138Updated 2 years ago
- Implementation of an export address table protection mitigation, like Export Address Filtering (EAF)☆97Updated last year
- Convert Microsoft Defender Antivirus Signatures (VDM) into YARA rules☆46Updated this week
- Winbindex bot to pull in binaries for specific releases☆47Updated last year
- ☆51Updated 5 months ago
- The FLARE team's open-source library to disassemble Common Intermediate Language (CIL) instructions.☆163Updated 3 weeks ago
- Signature-based detection of malware features based on Windows API call sequences. It's like YARA for sandbox API traces!☆82Updated last year
- ☆71Updated last year
- A Python script to download PDB files associated with a Portable Executable (PE)☆119Updated last month
- This is a little plugin to copy disassembly in a way that is usable in YARA rules!☆41Updated last year
- This x64dbg plugin allows you to upload your sample to Malcore and view the results.☆33Updated last year
- Golang bindings for PE-sieve☆42Updated last year
- ☆29Updated 3 weeks ago